I was recently asked by one of our customers what the rules were for the passphrases used with bpinst, esp. where it relates to KMS and the use of passphrases to generate keys per the Data At Rest section of the Security and Encryption guide.
I've ...